Information Security Officer

Job Description: Information Security Officer – Third Party Risk Management (TPRM)

Job Details

• Location: 's-Hertogenbosch, Netherlands
• Work Arrangement: Hybrid (Thursday onsite is mandatory)
• Contract Duration: ASAP – 31 August 2027
• Working Hours: 36 hours per week
• Experience: Minimum 5 years
• Education: HBO (Bachelor’s degree or equivalent)
• Employment Type: Employment basis only – ZZP / Freelancers not permitted

Role Overview

We are looking for an experienced Information Security Officer with strong expertise in Third Party Risk Management (TPRM). The successful candidate will be responsible for identifying, assessing and managing information security risks associated with suppliers, cloud providers and other third-party service providers.

Key Responsibilities

• Identify, assess and manage security risks associated with suppliers and third parties.
• Advise Procurement on security requirements and appropriate control measures.
• Translate security findings into practical recommendations and actions.
• Interpret regulatory requirements, including DORA, and translate them into actionable security requirements for ICT service providers.
• Apply security policies and key controls and contribute to the Third Party Risk Management Framework.
• Work closely with Business, Legal, Privacy, Risk and IT teams to embed security throughout the supplier lifecycle.

Required Skills & Experience

• Minimum HBO-level education in Information Security, IT Risk Management or a related discipline.
• At least 5 years of relevant professional experience.
• Strong knowledge and experience in Third Party Risk Management, Supplier Security or ICT Third-Party Risk.
• Experience conducting or reviewing supplier security risk assessments and due diligence.
• Good understanding of DORA, ISO 27001/27002 and NIST frameworks.
• At least one relevant security certification, such as CISSP or CISM.
• Strong stakeholder management, communication and advisory skills.

Team & Working Environment

• Join a collaborative Security team consisting of 10 Information Security Officers.
• Hybrid working arrangement.
• Thursday is the mandatory team collaboration day at the Den Bosch office.